Https proxy auth issue with git in cygwin 2.2.1

[Lukasz Pielak <pielak at gmail dot com>]

Hi

In the latest Cygwin 2.2.1. git doesnât work with proxy authentication.
The git version is 2.5.1 and the curl version is 7.43.
The error prints fatal: unable to access
'https://github.com/mockito/mockito.git/': Unknown SSL protocol error
in connection to github.com:443

In my previous Cygwin 1.7.35 (with curl 7.41) this problem didnât
exist. Git for windows (git 2.5.1 version, but curl is 7.44) seems to
work too.

I assume that  there is a bug in curl rather than in git.

Console output:

{ mockito } master  uname -a
~/gitrepo/demo/mockito 127
CYGWIN_NT-6.1-WOW K11263 2.2.1(0.289/5/3) 2015-08-20 11:40 i686 Cygwin
{ mockito } master Â

{ mockito } master  curl --version
    ~/gitrepo/demo/mockito
curl 7.43.0 (i686-pc-cygwin) libcurl/7.43.0 OpenSSL/1.0.2d zlib/1.2.8
libidn/1.29 libssh2/1.5.0
Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps
pop3 pop3s rtsp scp sftp smb smbs smtp smtps telnet tftp
Features: Debug IDN IPv6 Largefile GSS-API Kerberos SPNEGO NTLM
NTLM_WB SSL libz TLS-SRP UnixSockets Metalink


{ mockito } master  GIT_TRACE=2 git pull


~/gitrepo/demo/mockito
12:22:48.164349 git.c:558               trace: exec: 'git-pull'
12:22:48.164349 run-command.c:347       trace: run_command: 'git-pull'
12:22:48.429558 git.c:348               trace: built-in: git
'rev-parse' '--parseopt' '--stuck-long' '--'
12:22:48.689167 git.c:348               trace: built-in: git
'rev-parse' '--git-dir'
12:22:48.860772 git.c:348               trace: built-in: git
'rev-parse' '--git-path' 'objects'
12:22:49.032378 git.c:348               trace: built-in: git
'rev-parse' '--is-bare-repository'
12:22:49.094780 git.c:348               trace: built-in: git
'rev-parse' '--show-toplevel'
12:22:49.188383 git.c:348               trace: built-in: git 'ls-files' '-u'
12:22:49.297586 git.c:348               trace: built-in: git
'symbolic-ref' '-q' 'HEAD'
12:22:49.469192 git.c:348               trace: built-in: git 'config'
'branch.master.rebase'
12:22:49.656398 git.c:348               trace: built-in: git 'config'
'pull.rebase'
12:22:49.843604 git.c:348               trace: built-in: git 'config' 'pull.ff'
12:22:49.921606 git.c:348               trace: built-in: git
'rev-parse' '-q' '--verify' 'HEAD'
12:22:50.015209 git.c:348               trace: built-in: git 'fetch'
'--update-head-ok'
12:22:50.171214 run-command.c:347       trace: run_command:
'git-remote-https' 'origin' 'https://github.com/mockito/mockito.git'
fatal: unable to access 'https://github.com/mockito/mockito.git/':
Unknown SSL protocol error in connection to github.com:443


{ mockito } master  GIT_CURL_VERBOSE=1 git pull


~/gitrepo/demo/mockito 1
* STATE: INIT => CONNECT handle 0x800834c8; line 1075 (connection #-5000)
* Couldn't find host github.com in the .netrc file; using defaults
* Added connection 0. The cache now contains 1 members
*   Trying 10.105.36.152...
* STATE: CONNECT => WAITCONNECT handle 0x800834c8; line 1128 (connection #0)
* Connected to webproxy.mycorp.com (10.105.36.152) port 8080 (#0)
* STATE: WAITCONNECT => WAITPROXYCONNECT handle 0x800834c8; line 1225
(connection #0)
* Establish HTTP proxy tunnel to github.com:443
> CONNECT github.com:443 HTTP/1.1
Host: github.com:443
User-Agent: git/2.5.1
Proxy-Connection: Keep-Alive

* Read response immediately from proxy CONNECT
< HTTP/1.1 407 Proxy Authentication Required
< Proxy-Authenticate: NEGOTIATE
< Proxy-Authenticate: NTLM
< Proxy-Authenticate: BASIC realm="BCAAA"
< Cache-Control: no-cache
< Pragma: no-cache
< Content-Type: text/html; charset=utf-8
< Proxy-Connection: close
< Connection: close
< Content-Length: 1551
<
* Ignore 1551 bytes of response-body
* Connect me again please
* ALPN, offering http/1.1
* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
* successfully set certificate verify locations:
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
* Unknown SSL protocol error in connection to github.com:443
* Curl_done
* Closing connection 0
* The cache now contains 0 members
* STATE: WAITPROXYCONNECT => CONNECT handle 0x800834c8; line 1208
(connection #-5000)
* Couldn't find host github.com in the .netrc file; using defaults
* Added connection 1. The cache now contains 1 members
* Hostname webproxy.mycorp.com was found in DNS cache
*   Trying 10.105.36.152...
* STATE: CONNECT => WAITCONNECT handle 0x800834c8; line 1128 (connection #1)
* Connected to webproxy.mycorp.com (10.105.36.152) port 8080 (#1)
* STATE: WAITCONNECT => WAITPROXYCONNECT handle 0x800834c8; line 1225
(connection #1)
* Establish HTTP proxy tunnel to github.com:443
> CONNECT github.com:443 HTTP/1.1
Host: github.com:443
User-Agent: git/2.5.1
Proxy-Connection: Keep-Alive

* Read response immediately from proxy CONNECT
< HTTP/1.1 407 Proxy Authentication Required
< Proxy-Authenticate: NEGOTIATE
* gss_init_sec_context() failed: : SPNEGO cannot find mechanisms to negotiate
< Proxy-Authenticate: NTLM
< Proxy-Authenticate: BASIC realm="BCAAA"
< Cache-Control: no-cache
< Pragma: no-cache
< Content-Type: text/html; charset=utf-8
< Proxy-Connection: close
< Connection: close
< Content-Length: 1551
<
* Received HTTP code 407 from proxy after CONNECT
* Expire cleared
* Curl_done
* Closing connection 1
* The cache now contains 0 members
fatal: unable to access 'https://github.com/mockito/mockito.git/':
Unknown SSL protocol error in connection to github.com:443

Thanks
Lukasz

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple